LEGAL
Privacy Policy
Effective date: November 9, 2026
1. Introduction
Appraiso LLC ("we," "us," or "our"), a Wyoming limited liability company, operates the Appraiso mobile application and website at appraiso.app (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
Account Information
If you join our launch waitlist, we store your email address, signup time, and launch-notification consent in Supabase to send one email when Appraiso launches. A waitlist signup does not create an account or subscribe you to marketing emails. To leave the list or request removal, email [email protected] from the address you submitted.
When you create an account, we collect your email address and display name. If you sign in with Apple or Google, we receive a unique identifier and, optionally, your name and email as provided by those services.
Photos and Images
When you scan an item, the photo is uploaded to our cloud storage (Cloudflare R2) and sent to the AI and search services described below to identify and price the item. We keep the photo in our cloud storage. If you are signed in, we also keep a copy of each scan's photo with your saved scan history, so you can see and rescan your scans on another phone. If you are signed in, the photo is filed under your account so that it is deleted when you delete your account. A photo uploaded while you are not signed in is not linked to any account. If you later sign in or create an account on the same phone, the scans you made there without an account that have not been saved to another account are added to that account's saved scan history, and their photos are then saved with it and deleted when you delete that account; the copy uploaded at the time of the scan stays unlinked. Appraiso does not use your photos to train its own AI models. We use them only to deliver and show scan results, including recognizing the same item when it is scanned again by you or another user, as described below. Third-party provider handling is also described below.
To recognize an item when it is scanned again, by you or another Appraiso user, we also keep non-reversible numeric representations (“embeddings”) of each scan: one made from the item's photo and one from the photo and the item's details. They are stored with the item's title, category, brand, and estimated value and, if you are signed in, your account ID. They cannot be turned back into your photo. When someone else scans the same item, a match can supply the item's name for their scan; they do not see your photo or your account details. Item names and prices found for a scan may also be reused for later scans of the same item, including by other users.
Shared Reports
If you share a report, we create a public copy of it, including the item photo, at a link you can send to others. Anyone with the link can view the copy; it is not listed in search engines and does not include your email address or account details. The link stops working after 7 days, and we then delete the copy and its photo.
AI Processing
We use third-party AI services to analyze scans and answer item questions. Google Gemini is our primary visual provider and receives uploaded photos for item identification and visual analysis. If the primary item detector is unavailable or returns unusable output, and our separately controlled vision backup is enabled, DeepSeek may receive the uploaded scan photo solely to identify the item. It is not called after a successful primary result. DeepSeek also receives scan-derived text for features such as recommendations, sentiment summaries, title refinement, item facts, pricing checks, luxury listing analysis, and Bytler. For Bytler, DeepSeek may receive your typed question, canonical item identity, and only the selected report or market evidence needed to answer it. We remove email addresses and recognized phone numbers before Bytler provider calls, and Bytler does not send DeepSeek uploaded photos, image URLs, account IDs, authentication tokens, or payment information. Google Gemini may also receive the same redacted text, without photos, to write some Bytler answers and suggested questions, and as a backup when another service is unavailable. TypeSafe receives your redacted Bytler question and the item's name to decide what kind of question it is, and receives candidate item titles and marketplace listing titles to check that they describe the same item; it does not receive photos or account details. When Bytler needs current information from the web, or when you ask it to find buying options, the redacted question and the item's name and details are also sent to Perplexity, our web search provider, with a backup search routed through OpenRouter when Perplexity is slow or unavailable. Some Bytler answers also use SearchAPI.io, which receives search terms written from your question and the item's name. Perplexity also receives item names and details to research some report sections, such as fragrance profiles.
Bytler Conversations
When you use Bytler, we collect your questions and store them with structured answers and a validated snapshot of the current item report. This lets you restore the conversation across sessions and devices, keeps answers tied to the report that supported them, and enables optional answer feedback or a closed report reason. Do not include passwords, payment-card details, government identifiers, Social Security numbers, or other sensitive information in chat.
Usage Data
In the app, we collect anonymized analytics data including scan counts, feature usage, and app performance metrics via Firebase Analytics. Firebase Analytics also works out an approximate region (city or country) from your IP address; this is not linked to your account. On our website (appraiso.app), we use Google Analytics 4 to measure page visits, referral sources, and approximate region (see "Tracking Technologies & App Tracking" below). This data is not tied to your personal identity and is used solely to improve the Service.
Device Information
We automatically collect certain device information when you use the Service, including device model, operating system version, app version, and general performance metrics. This information is used for diagnostics and to improve compatibility.
Free-Scan Counting
If you use Appraiso without an account, the app creates a random identifier, stored on your device, and our server counts your free scans against it. To limit abuse, our server also counts how many of these identifiers are created from the same network connection each day. These counts are not used for advertising.
Crash and Error Reports
We use Firebase Crashlytics and Sentry to collect crash reports and error logs. These may include device model, OS version, stack traces, and your account email or user ID to help us diagnose issues affecting your account. This data helps us identify and fix bugs.
Subscription Information
If you subscribe to a paid plan, RevenueCat processes your subscription and retains transaction identifiers to manage your subscription status. All payment information (credit card, billing address) is handled directly by Apple through the App Store — we never receive, store, or have access to your payment details.
3. How We Use Your Information
- To provide, operate, and maintain the Service
- To process your scans and deliver appraisal results
- To manage your account and subscription
- To improve and optimize the Service
- To monitor and analyze usage patterns and trends
- To detect and prevent technical issues
- To send transactional communications (account confirmations, security alerts)
- To comply with legal obligations
4. Data Sharing & Third-Party Services
We do not sell, rent, or trade your personal information to third parties.
We share data with third-party service providers only as necessary to operate the Service. Each provider receives only the minimum data required to perform its function:
- Supabase — Authentication and user data storage (receives: email, account ID, scan history and usage counters)
- Firebase (Google) — Analytics and crash reporting (receives: anonymized usage data, device info, crash logs; works out an approximate region from the IP address, not linked to your account)
- Google Analytics (Google) — Website traffic measurement on appraiso.app (receives: page visits, referral source, approximate region, device and browser type)
- Sentry — Error tracking and performance monitoring (receives: error data, device info, account email and user ID for diagnostics)
- Cloudflare — Image storage (receives: uploaded scan photos and shared report copies) and storage of feedback you send through the app (receives: your feedback, the item it is about, device and app version, and your account ID if you are signed in)
- MongoDB Atlas — Storage of scan embeddings used to recognize items (receives: item title, category, brand, estimated value, non-reversible numeric representations of the scan's photo and details, and, if you are signed in, your account ID; does not receive photos)
- RevenueCat — Subscription management (receives: your account ID if you are signed in, otherwise a random ID, and transaction identifiers)
- Google Gemini AI — Item identification, visual analysis, and report and pricing text (receives: uploaded photos and scan-derived text), and Bytler (receives: redacted questions and item/report text, without photos, to write some answers and suggested questions and as a backup when another service is unavailable). Under Google's paid-service terms, prompts, files, and responses are not used to improve Google products; Google may retain limited data for abuse monitoring, and any optional project-owned API logs follow the production project's configured retention
- DeepSeek AI — Text-based analysis features including recommendations, sentiment summaries, title refinement, luxury listing analysis, checking whether marketplace listings match your item, and Bytler (receives: minimized, redacted questions, scan-derived item/report text, and public marketplace listing titles, prices and links; does not receive Bytler scan photos). When the separately controlled last-resort vision backup is enabled, DeepSeek may also receive an uploaded scan photo only after the primary item detector fails or returns unusable output. DeepSeek's published API materials do not provide Appraiso a zero-data-retention guarantee; processing may occur in the People's Republic of China under DeepSeek's applicable terms
- Perplexity — Web search for Bytler answers and for finding buying options (receives: the text of your shopping question and the item's name and details, after email addresses and recognized phone numbers are removed; does not receive your photos, account details, or payment information). Perplexity states that this service keeps request and response content on its servers under its own terms and has not given Appraiso a fixed retention period; we instruct it not to make that content retrievable and we do not use its stored-conversation features
- TypeSafe — Small AI models that sort Bytler questions and check whether two item titles describe the same item (receives: your Bytler question with email addresses and recognized phone numbers removed, the item's name, candidate item titles, and marketplace listing titles; does not receive photos or account details)
- OpenRouter — Routing for a backup web search used only when the primary search is slow or unavailable, and for an OpenAI model that writes Bytler's Deep Think answers (receives: the same redacted question and item text, your item's report details, and the web search results for that question; does not receive photos). We request a zero-data-retention route and deny use of the content for training on every customer request
- OpenAI — Last-resort vision fallback when Google Gemini is unavailable, and retail-price verification (receives: uploaded photos or their web addresses only on the fallback path, and scan-derived text such as item titles for price verification)
- SearchAPI.io — Visual and web search used to match your item and find listings (receives: the web address of your uploaded photo for visual search, text queries built from your scan, and, for some Bytler answers, search terms written from your question and the item's name; it forwards these to search engines such as Google, Bing, and Yandex on our behalf)
- ScrapeBadger — Visual search and marketplace results (receives: the web address of your uploaded photo for visual search, and search terms built from your scan, such as the item's name, for marketplace listings such as eBay and Vinted; it forwards these to the search engine or marketplace on our behalf; does not receive account details)
- Scrape.do and similar web data services — Fetch public marketplace, retailer, and price-guide pages for your item (receive: the page addresses we request, which contain search terms such as the item's name; do not receive photos or account details)
- eBay — Listings, sold prices, and visual search for similar items (receives: search terms such as the item's name and, for visual search, a copy of your scan photo sent directly from your phone; does not receive your account details)
- Open TCG (TCG Tracking) — Trading card recognition (receives: a cropped photo of your trading card; does not receive account details)
- Marketplace, catalog, and reference services — Reverb, UPCitemdb, TCG Price Lookup, JustTCG, PriceCharting, YouTube (Google), Google Books, Wikidata, Wikipedia, Open Library, MusicBrainz, The Metropolitan Museum of Art, Supadata (video transcripts), Reddit, and Pinterest Trends, among others, are searched for listings, prices, product details, card prices, review videos, owner discussions, demand trends, and item facts (receive: search terms such as the item's name, a card's name and number, a barcode number, or a video's web address; do not receive photos or account details)
- Microsoft Bing Visual Search — Visual matching of your item (receives: the web address of your uploaded photo so Bing can fetch and analyze it)
- Railway — Hosting and processing infrastructure for our backend (receives: all request data in transit, including photos, scan text, and account identifiers, while our servers process it)
- Rakuten Advertising — Similar-item retail search (receives: brand-free search keywords derived from your scan; does not receive photos or account data). Outbound links to Rakuten retailers are affiliate links
- eBay Partner Network — Outbound eBay links carry an affiliate identifier so eBay can credit Appraiso as the referrer; eBay may record that you clicked the link (receives: no account information from us)
- Gravatar (Automattic) — Optional profile image lookup (receives: a one-way hash of your account email, never the email itself, and only when you have no Apple or Google profile photo; Apple private-relay addresses are skipped, and initials are shown if no image is found)
We share user data only with the services listed above, and each one receives only the data listed for it. Each of these services is bound by its terms with us to protect that data with the same or equal protection as this policy describes, except where this policy states a limit for a specific service: DeepSeek has not given Appraiso a zero-data-retention guarantee and may process data in the People's Republic of China, Perplexity keeps request and response content without a fixed retention period, and Open TCG is a free public service that has not told Appraiso how long it keeps card photos. The public catalog and reference services listed above receive search terms only, under their own public terms. Each service also has its own privacy policy. We do not sell your personal data or share it with third parties for advertising or profiling. Some outbound shopping links are affiliate links (eBay Partner Network, Rakuten Advertising) that identify Appraiso as the referrer; they do not receive your account information.
We may also disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
5. Data Retention
We retain your data as follows:
- Account information — retained for as long as your account is active
- Uploaded images — kept in our cloud storage. Photos uploaded while you are signed in are deleted when you delete your account (see below). Appraiso does not use them to train its own AI models; third-party provider retention and model-use terms are described in this policy
- Scan embeddings — non-reversible numeric representations of scans (with item title, category, brand, estimated value, and, if you are signed in, your account ID, but not the photo) are retained to recognize items. Those made while you are signed in are deleted when you delete your account, and you can ask us to remove them at any time via [email protected]
- Shared reports — the public copy of a shared report and its photo are deleted after the link expires (7 days)
- Scan history — kept in our cloud with each scan's photo, so it can be restored on a new phone; deleted when you delete your account
- Bytler conversations — questions, structured answers, and validated item-report snapshots are retained with the account's scan history so chat can be restored; deleting the item's cloud chat/history or the account deletes the associated thread and its feedback/reports
- Bytler active-session data — the short-lived Redis thread/report snapshot expires after 30 minutes
- Bytler operational telemetry — content-free aggregate counters, closed reason codes, latency, token/cost totals, and provider/tool status are retained for up to 90 days; a pseudonymous operator-unblock audit is retained for up to 30 days. These records do not contain questions, answers, reports, images, URLs, authentication tokens, or account IDs
- AI provider processing — providers may transiently retain inputs and outputs under their own terms for service operation, security, or abuse monitoring. Google's paid-service prompts, files, and responses are not used to improve Google products. DeepSeek's published API materials do not give Appraiso a fixed retention period or zero-data-retention guarantee. Perplexity's web search service keeps request and response content on its servers under its own terms, without a retention period stated to Appraiso
- Subscription data — transaction identifiers retained by RevenueCat for the duration of your subscription and as required for refund/dispute resolution
- Anonymized analytics — aggregated, non-identifiable usage data (e.g., total scan counts, feature usage trends) may be retained indefinitely as it cannot be tied to any individual
- Website analytics — Google Analytics event-level data is retained per our GA4 retention settings (up to 14 months), after which it is automatically deleted or aggregated
- Crash reports — retained for up to 90 days for debugging purposes
You can delete your account at any time through the App (Profile tab > Manage Profile > Delete Account). Upon deletion, your personal data (account information, scan history, and uploaded images) will be permanently removed within 30 days, unless retention is required by applicable law, court order, or to resolve pending disputes or chargebacks.
6. Data Security
We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure token storage (iOS Keychain), and server-side authentication. However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.
7. Data Breach Notification
In the event of a data breach that compromises your personal information, we will notify affected users in accordance with applicable state and federal laws. Notification will be provided via email and/or in-app notice as promptly as practicable, and no later than required by law.
8. Tracking Technologies & App Tracking
App Tracking Transparency
We do not use Apple's Identifier for Advertisers (IDFA) or any advertising tracking frameworks. We do not track you across other apps or websites. Our use of Firebase Analytics collects only anonymized, aggregate data and does not require App Tracking Transparency (ATT) authorization.
Do Not Track / Global Privacy Control
Our website does not currently respond to "Do Not Track" (DNT) browser signals or Global Privacy Control (GPC) signals, as there is no universally accepted standard for how to respond to such signals. However, we do not engage in cross-site tracking of our users.
Cookies & Website Analytics
Our website (appraiso.app) uses Google Analytics 4 ("GA4"), a web analytics service provided by Google, to understand how visitors find and use the site — pages visited, referral sources, approximate region, and device/browser type. GA4 sets first-party cookies (such as _ga) that assign a pseudonymous, randomly generated client ID. It does not receive your name, email, account data, or scan data, and we do not enable Google's advertising features (such as Google Signals or ad personalization) or use analytics data for advertising.
We do not use advertising cookies, tracking pixels, or cross-site trackers. Aside from analytics, our website uses no essential cookies beyond what is required for basic functionality.
You can block analytics cookies through your browser settings or with Google's opt-out browser add-on (tools.google.com/dlpage/gaoptout). Blocking these cookies does not affect your use of the website.
9. Third-Party Links
The Service may display links to third-party websites and online marketplaces (such as eBay, Amazon, and Google Shopping) as part of your scan results. These links are provided for informational purposes only. Some links to eBay and to retailers surfaced through Rakuten Advertising are affiliate links: they carry a referral identifier for Appraiso, and we may earn a commission if you make a purchase. The referral identifier does not include your account information.
We are not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party site you visit. Clicking a third-party link does not imply our endorsement of that site or its practices.
10. International Users & Data Transfers
The Service is operated from the United States, and our primary hosting and database infrastructure processes data in the United States. Some service providers operate globally. In particular, DeepSeek states that it processes and stores data in the People's Republic of China.
If you access the Service from another country, your information may be transferred to and processed in the United States, China, and other countries where our service providers operate. Their data-protection laws may differ from those in your country of residence.
We minimize the text sent for Bytler, remove direct contact details before provider calls, and do not send Bytler scan photos to DeepSeek. If the separately controlled vision backup is enabled, an item scan photo may be sent to DeepSeek only when the primary item detector fails or returns unusable output. By using the Service, you acknowledge these transfers and the processing described in this Privacy Policy.
11. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and data
- Opt out of anonymous usage analytics (Profile tab → Privacy → Share anonymous usage analytics)
- Request a copy of your data in a portable format
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us at [email protected] using the email address associated with your account. We will verify your identity by matching your request email to your account email before processing any request. We will respond within 30 days (or sooner as required by applicable law).
12. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
Right to Know
You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which that information is collected, the business purpose for collecting it, and the categories of third parties with whom we share it.
Right to Delete
You have the right to request deletion of your personal information, subject to certain exceptions provided by law.
Right to Opt Out of Sale or Sharing
We do not sell or share your personal information as defined under the CCPA/CPRA. We do not sell personal data to third parties for monetary or other valuable consideration, and we do not share personal data for cross-context behavioral advertising.
Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA/CPRA rights. You will not receive different pricing, quality, or service levels for exercising your privacy rights.
How to Submit a Request
To exercise your California privacy rights, contact us at [email protected]. We will verify your identity before processing your request and respond within 45 days as required by law.
13. Nevada Privacy Rights
Under Nevada Senate Bill 220, Nevada residents have the right to submit a verified request directing us not to sell their personal information. As stated in this policy, we do not sell your personal information. However, if you are a Nevada resident and wish to submit such a request, you may contact us at [email protected].
14. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such data, we will delete it promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected].
15. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Effective date" at the top of this page and, where appropriate, through in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.
16. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:
Appraiso LLC
30 N Gould St, Ste N
Sheridan, WY 82801
United States